#!/bin/bash

#
# Copyright (c) 2023, Intel Corporation
# SPDX-License-Identifier: BSD-3-Clause
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
#
#  * Redistributions of source code must retain the above copyright notice,
#    this list of conditions and the following disclaimer.
#  * Redistributions in binary form must reproduce the above copyright notice,
#    this list of conditions and the following disclaimer in the documentation
#    and/or other materials provided with the distribution.
#  * Neither the name of Intel Corporation nor the names of its contributors
#    may be used to endorse or promote products derived from this software
#    without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
# LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
# POSSIBILITY OF SUCH DAMAGE.
#

source ../../configUtils.sh

# Imports QVS MTLS certificate to SSS ./certificates
# Context: Requires being in SSS certificates dir
function ImportQVSCertificate() {
    ImportCertificate "../../../configuration-default/certificates/qvs-to-sss-client-cert.pem" "."
}

# Exports provided MTLS certificate to QVS internal-ca
# Context: Requires being in SSS certificates dir
function ExportSSSCertificate() {
    ImportCertificate "./sss-mtls-cert.pem" "../../../configuration-default/certificates/internal_ca"
}

# Prepare SSS certs
mkdir -p certificates
pushd certificates || fail "Failed to access SSS certificates dir" 4
prepareSelfSignedCert "sss-mtls-" '/C=US/O=Example/CN=localhost'
prepareSelfSignedCert "sign-" '/C=US/CN=Sample signing key/O=Example'

#Exchange SSS and QVS MTLS certs
ImportQVSCertificate
ExportSSSCertificate
popd || fail "Failed leave SSS certificates dir" 5

